๐ฉ๐ช
gadix
2026-09-28 00:53:34
(1 week ago)
136.144.42.201 - - [28/Sep/2026:01:41:41 +0200] "POST /wp-login.php HTTP/1.1" 200 16976 "-" "Mozilla ...
show more
136.144.42.201 - - [28/Sep/2026:01:41:41 +0200] "POST /wp-login.php HTTP/1.1" 200 16976 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/17.0 Safari/605.1.15"
136.144.42.201 - - [28/Sep/2026:01:51:54 +0200] "POST /wp-login.php HTTP/1.1" 200 16982 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
136.144.42.201 - - [28/Sep/2026:02:53:31 +0200] "POST /wp-login.php HTTP/1.1" 200 16981 "-" "Mozilla/5.0 (Windows NT 10.0;
...
show less
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-18 22:03:56
(2 weeks ago)
cloudlinux2 fail2ban: 2026-09-19 00:00:58,907 fail2ban.filter [1813]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-19 00:00:58,907 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 125.59.28.31 - 2026-09-19 00:00:58cloudlinux2 fail2ban: 2026-09-19 00:01:09,111 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 104.234.19.114 - 2026-09-19 00:01:08cloudlinux2 fail2ban: 2026-09-19 00:01:05,045 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 136.144.42.201 - 2026-09-19 00:01:03cloudlinux2 fail2ban: 2026-09-19 00:01:04,995 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 104.234.19.114 - 2026-09-19 00:01:04cloudlinux2 fail2ban: 2026-09-19 00:01:44,722 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 173.239.254.161 - 2026-09-19 00:01:44cloudlinux2 fail2ban: 2026-09-19 00:02:34,438 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 45.132.227.153 - 2026-09-19 00:02:33cloudlinux2 fail2ban: 2026-09-19 00:02:38,495 fail2ban.filter [1813]: INFO [plesk-wordpress] Found 45.132.227.153 - 2026-09-19 00:02:38clo
show less
Web App Attack
Anonymous
2026-09-10 16:44:41
(4 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฌ๐ง
SCLwebadministrator
2026-09-03 07:31:00
(1 month ago)
Bruteforce WordPress logins
Brute-Force
Web App Attack
Hacking
๐ซ๐ท
tecnicorioja
2026-09-02 22:01:06
(1 month ago)
wp-login attack [02/Sep/2026:14:05:00
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-02 19:51:31
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
Anonymous
2026-08-30 14:07:34
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ซ๐ท
tecnicorioja
2026-08-29 22:00:56
(1 month ago)
wp-login attack [29/Aug/2026:09:26:15
Brute-Force
Web App Attack
Anonymous
2026-08-28 22:47:25
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 20:05:08
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.144.42.201 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.144.42.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:04:51.492642 2026] [security2:error] [pid 27005:tid 27005] [client 136.144.42.201:57141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.202"] [uri "/wp-content/.env"] [unique_id "aooA410cBzelyPB0T5eqFgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 19:27:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.144.42.201 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.144.42.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:26:28.950163 2026] [security2:error] [pid 23078:tid 23078] [client 136.144.42.201:27969] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.180"] [uri "/blog/.env"] [unique_id "aon35Ak0xbvUT0KKAbhHBQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐น๐ท
neron
2026-08-15 23:06:48
(1 month ago)
CrowdSec blocked: http:exploit detected via OPNsense firewall
Hacking
Web App Attack
๐บ๐ธ
ipblock.com
2026-08-15 17:41:00
(1 month ago)
IPBlock protected site ID [3390-wh].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
๐ฒ๐น
Malta
2026-08-15 17:36:22
(1 month ago)
136.144.42.201 - - [15/Aug/2026:19:36:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows ...
show more
136.144.42.201 - - [15/Aug/2026:19:36:22 +0200] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/129.0.0.0 Safari/537.36"
Brute-force password attempt
show less
Hacking
Web App Attack
Brute-Force
Anonymous
2026-08-15 11:15:51
(1 month ago)
Web attack blocked by Wordfence on limburgsekunstkring.nl (1 hit). Reported by CRMON.
Web App Attack